Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
File: w5VnlKe5iREVrTr5RXPnlhsWS6w.cer (raw, json)
Hash identifier: xyL1m4RM1G4608cCZdH+dbKCMT/EESoM1WLmm7GLj8I=
Subject key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143F943D7A168404E785C82BD399201
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200252
IP: 193.107.48.0/24
IP: 2a01:f200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f9:43:d7:a1:68:40:4e:78:5c:82:bd:39:92:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3956794a7b9891115ad3af94573e7961b164bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:b1:a0:23:80:6d:46:66:3f:cf:13:ea:6e:
1f:0d:4f:a7:77:ec:ec:61:12:1c:68:85:54:25:b5:
2d:a2:4b:ed:fd:68:92:d4:d8:70:a4:32:b5:91:af:
aa:53:d8:fd:46:33:4a:c0:d4:fd:3a:d7:e1:19:44:
f7:bb:a6:71:80:5a:09:0d:a0:f0:ae:38:49:69:c0:
df:71:ed:ee:fb:af:24:85:f2:11:97:43:74:6f:ad:
82:ef:12:f2:61:ff:43:dd:ae:30:94:a8:41:11:23:
a5:34:f2:a7:78:eb:51:ab:52:33:18:47:ae:08:b1:
82:ab:e7:eb:35:8a:f9:33:5a:30:2b:a1:48:77:31:
d9:92:49:79:85:ef:dd:16:d4:89:4e:e9:2d:a2:15:
51:59:3c:30:9b:6c:a3:0a:b5:bc:62:73:81:06:d5:
84:41:01:b2:d5:dd:a1:0f:62:5d:2b:55:5e:6f:3c:
41:b7:e8:91:94:ba:2d:71:df:f7:89:8c:b1:11:af:
b0:85:a0:cc:e7:d3:af:7d:c5:ec:a6:5d:f6:8a:a1:
04:9e:21:b5:35:3a:91:0a:b6:b6:04:e1:74:0a:a6:
57:07:cc:c9:f6:74:7e:dd:fb:c7:cf:66:fa:75:e5:
f2:0a:e9:b3:85:24:7f:17:05:69:b1:b2:ae:e5:84:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.48.0/24
IPv6:
2a01:f200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200252
Signature Algorithm: sha256WithRSAEncryption
ab:21:a0:5b:95:e3:a4:e2:cb:58:d2:cf:a1:c5:ee:b1:1a:6f:
e8:7f:62:17:1b:1f:b1:08:aa:45:9f:2f:3a:d7:48:8d:59:7e:
35:55:c4:f2:9a:5e:29:44:8e:0d:5d:cd:df:06:00:85:2c:94:
4d:d1:6e:03:a0:2d:f0:75:1c:ea:b5:21:04:2e:a0:b8:a1:23:
92:4c:5d:dd:f5:15:b7:ae:b5:19:cb:11:96:1e:0c:93:6b:17:
45:5d:36:5b:d1:68:15:78:2c:6a:7f:06:34:1e:7b:8f:82:29:
bd:37:39:8d:1a:95:6a:ec:55:49:23:cb:46:65:96:b3:c4:7a:
46:ae:1c:f8:59:74:00:b3:7f:ea:e3:1a:b2:4b:e1:55:31:62:
3d:51:a6:97:14:8a:9e:dd:06:6f:8d:70:a5:14:6f:1a:02:4e:
2f:96:8a:04:8d:32:10:8f:01:43:14:7f:f0:d9:c5:6e:00:a1:
dc:37:bc:81:24:79:be:a3:47:6e:82:ea:d7:cd:f9:ef:17:91:
f3:a6:50:04:d4:00:70:35:a3:ac:c0:35:a1:c2:41:8b:67:40:
3b:54:fc:76:d8:bf:85:0c:d9:a2:e7:dd:ae:a9:e8:60:d7:01:
8c:c7:ae:bf:1d:62:c6:14:bf:ee:1d:42:c8:2c:37:95:9e:03:
ed:dd:13:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:31 2025 by rpki-client